QCP Trading takes significant step towards full licensing in Singapore

The Securities and Exchange Board of India (SEBI) is set to introduce a same-day settlement cycle starting March 28, making India only the second country, following China, to adopt such a system. This move comes amidst growing competition from the cryptocurrency sector, with SEBI Chairperson Madhabi Puri Buch emphasizing the need for instant settlement and tokenization to remain competitive.Photo by Big G Media on UnsplashEvolving market dynamicsBuch has unveiled plans aimed at enhancing the efficiency of India's capital markets through faster settlement processes. During a recent press conference, she highlighted the significance of adapting to evolving market dynamics. Buch stated:“If our well-regulated market cannot compete with the crypto world and cannot say we also offer you tokenization and instantaneous settlement over the medium term, I won’t even say long term, you should expect investors to move." The SEBI chairperson articulated that we live in a time where the current generation demands instant delivery of services. It’s with that in mind Buch believes that crypto is a threat to traditional financial markets. She stated:"Everybody wants instant everything. Right? So why should anyone believe that tomorrow if an alternative is available with instant settlement tokenization and they say the regulated market doesn’t offer it, you should expect people to move.” With a focus on meeting investor expectations for instant transactions, SEBI aims to bridge the gap between traditional capital markets and the rapidly evolving crypto landscape. Faster settlement cyclesIndia has been at the forefront of adopting faster settlement cycles, having transitioned to a one-day settlement (T+1) model between 2021 and January 2023. The optional same-day settlement, scheduled to commence later this month, represents another step towards enhancing market efficiency. However, Buch cautioned that further delays in embracing instant settlement could lead to a significant portion of the market shifting towards cryptocurrencies. The move towards faster settlement has been met with enthusiasm from some market participants. Indian business news publication Mint reported the comments of Shauryam Gupta, CEO of web trading platform Rupeezy, on the subject. Gupta stated: “The shift to instantaneous settlement is a substantial milestone, streamlining operations and cutting down on risk. The potential advantages of reducing counterparty risk and boosting liquidity signal positive growth for the sector.” However, others, particularly brokers, have expressed reservations. Brokers, who hold client funds and earn interest on balances, stand to see their interest earnings decrease with shorter settlement times. Nonetheless, SEBI remains steadfast in its commitment to modernizing India's capital markets to remain globally competitive. The regulatory landscape surrounding cryptocurrencies in India has been predominantly shaped by the nation's finance ministry and the Reserve Bank of India (RBI). While the RBI has been vocal in its opposition to cryptocurrencies, advocating for central bank digital currencies instead, SEBI's recent initiatives underscore its willingness to adapt to changing market dynamics. SEBI's efforts reflect a broader trend of regulatory bodies worldwide seeking to strike a balance between innovation and investor protection in an increasingly digital financial landscape. 

Akira ransomware, responsible for stealing $42 million from over 250 organizations across North America, Europe and Australia in just a year, is now targeting businesses in Singapore. In response, Singaporean authorities have issued a joint advisory warning local businesses about the increasing threat posed by a variant of this ransomware.Photo by Mike Enerio on UnsplashAlert follows complaintsThe alert follows multiple complaints from victims, prompting agencies like the Cyber Security Agency of Singapore (CSA), the Singapore Police Force (SPF) and the Personal Data Protection Commission (PDPC) to take action. These agencies emphasize the urgency of recognizing and combating this threat. How Akira operatesAkira affiliates employ various techniques to infiltrate a victim's network. These include exploiting known vulernabilities. For example, that could mean the targeting of services like Cisco virtual private networks (VPNs) that have been configured without multi-factor authentication (MFA). Another approach that the ransomware incorporates is attacking external-facing services such as the Remote Desktop Protocol (RDP) via brute force. Social engineering is another tool within its repertoire. This involves tricking victims into downloading malicious software or entering credentials on phishing websites. There is a marketplace for compromised credentials in the dark web. Akira also relies on such data, acquiring it from access brokers who sell network access.  Once inside a network, Akira affiliates often create new domain accounts to maintain persistent access, even after reboots. They use numerous tools to steal user credentials, escalate privileges and spread throughout the network. Detection and prevention measuresThe Singaporean advisory outlines several strategies for detecting, deterring and neutralizing Akira attacks. Authorities strongly advise against paying ransoms, on the basis that doing so does not guarantee data recovery or prevent future attacks. Authorities also warn that paying ransoms can encourage further attacks. The FBI has noted that Akira operators do not contact victims. Instead, they expect victims to initiate contact. Payment in BitcoinThe advisory outlines how Bitcoin is implicated in the ransomware scam. It states:”Ransom payments are requested in Bitcoin, which are directed to cryptocurrency wallet addresses specified by the affiliates. The TOR site (.onion) where victims contact the affiliates, contains stolen information and a list of the affected organisations.” It’s not the first time that Singaporean authorities have issued warnings that have implicated Bitcoin and crypto. In January, the CSA and SPF, in a joint advisory, suggested that people should use hardware wallets in an effort to guard against crypto-related malware and phishing attacks. A number of weeks prior to that, Singapore’s former Prime Minister, Lee Hsien Loong, took to Facebook to issue a warning with regard to a crypto scam that involved the use of deceptive content generated using artificial intelligence (AI). Mitigation techniquesBusinesses are being urged by the authorities to adopt best practices to mitigate the Akira ransomware threat. They suggest the implementation of a recovery plan alongside the use of multi-factor authentication (MFA) in order to secure data and the access to that data.  They also suggest filtering network traffic as it helps in identifying and blocking malicious activities. Meanwhile, disabling unused ports and hyperlinks curbs the risk further as it reduces the attack surface. Lastly, the authorities suggested the use of system-wide encryption to protect data even if it is accessed by unauthorized entities.

JPEX Exchange Scandal Sees Crypto Regulation Under Scrutiny in Hong KongWhile Hong Kong has been developing steadily as a crypto sector hub, the focus in the Chinese autonomous territory has turned towards regulation after a recent scandal involving an unlicensed cryptocurrency exchange.Photo by Ihor Saveliev on UnsplashOngoing investigationYesterday we reported on some arrests relative to problems experienced at crypto exchange JPEX. The fallout continues on Tuesday, with the Hong Kong police now understood to have arrested eight individuals, including social media influencers who promoted the exchange and JPEX employees, on allegations of fraud. This illicit activity in and around the JPEX exchange has affected over 1,600 investors, implicating more than $150 million in assets.JPEX, in response to mounting pressure, announced the suspension of trading on its platform. In a statement, the exchange mentioned ongoing negotiations with third-party market makers to address liquidity shortages. However, JPEX also accused an unidentified third-party market maker of maliciously freezing funds, further complicating the situation.Politicians and regulators speak outResponding to the incident via a press conference on Tuesday, Hong Kong’s Chief Executive, John Lee, emphasized the significance of investing in virtual assets through licensed platforms. Lee stated:“This incident highlights the importance that when investors want to invest in virtual assets, then they must invest on platforms that are licensed.” He also pledged that the Securities and Futures Commission (SFC) would closely monitor the situation to ensure investor protection.Elizabeth Wong, the Head of the SFC’s fintech unit, revealed that an investigation was underway to determine whether JPEX had violated anti-money laundering laws. The SFC had already declared JPEX unlicensed, prompting numerous complaints from investors who were unable to withdraw their virtual assets or experienced unexplained reductions in their balances.Assets frozenHong Kong authorities have taken decisive action against those involved in the scandal. They have frozen bank accounts valued at 15 million Hong Kong dollars ($1 million) and seized three properties valued at 44 million Hong Kong dollars. The police have reported receiving 1,641 complaints related to JPEX, involving a staggering $1.2 billion Hong Kong dollars. By last Wednesday, the SFC had received in excess of 1,000 complaints and at that point, they notified the general public.The JPEX scandal has drawn attention to the need for stronger cryptocurrency regulations in Hong Kong, a region that has become attractive to cryptocurrency firms since mainland China banned cryptocurrency transactions in 2021. In mainland China, trading cryptocurrencies on foreign exchanges from within the country remains illegal.Hong Kong’s response to cryptocurrency regulation has evolved. Beginning on June 1, the SFC started accepting applications from cryptocurrency exchanges, allowing licensed operators to serve retail investors, provided they understand the associated risks. Previously, only professional investors had access to such exchanges. Currently, only two exchanges in Hong Kong, OSL Exchange and Hashkey Exchange, have received approval to operate.As Hong Kong reevaluates its approach to cryptocurrency regulation, the crypto sector will hope that it strikes a balance between fostering innovation and protecting investors from fraud and market manipulation.